Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/yHYS6hpiiZouhLM3YQlOiEn7Dt4.roa
File: yHYS6hpiiZouhLM3YQlOiEn7Dt4.roa (raw, json)
Hash identifier: UvfLf0kl1I/2dxM34pZ3U07NlO8Q7BM1QyFjXwpJPeI=
Subject key identifier: C8:76:12:EA:1A:62:89:9A:2E:84:B3:37:61:09:4E:88:49:FB:0E:DE
Certificate issuer: /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial: 019420D5ACEEF3D2802D2B9B6BC566424704
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/yHYS6hpiiZouhLM3YQlOiEn7Dt4.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204436
IP address blocks: 91.197.228.0/22 maxlen: 24
185.181.116.0/22 maxlen: 24
2a0a:cb80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ac:ee:f3:d2:80:2d:2b:9b:6b:c5:66:42:47:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c87612ea1a62899a2e84b33761094e8849fb0ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:84:45:dd:85:6d:bd:b3:6f:5f:79:21:40:b3:
ad:ff:a6:0f:a6:30:f7:23:a3:de:a5:63:eb:73:7b:
42:76:93:0e:5e:f3:ea:0e:6d:b8:08:f0:a6:52:89:
9d:f0:6f:4e:52:88:00:cb:ac:cc:d6:08:0e:64:40:
ee:6b:ef:c8:d1:7d:2b:80:f1:7a:c3:3d:49:73:00:
0c:e4:48:55:02:08:96:be:81:89:31:92:eb:7c:3a:
12:22:f9:73:8f:1d:b5:01:90:1c:c4:d3:bb:99:a6:
b3:5e:6c:da:5c:c7:e5:ae:ca:5f:3b:f9:66:01:57:
82:69:fa:39:7f:7f:54:0e:89:66:3c:43:6b:01:e0:
5a:59:46:dd:23:45:4a:0f:78:56:f0:53:06:17:3e:
7c:0c:76:d2:5b:ee:ef:ab:60:4c:96:93:a2:67:ab:
53:df:9d:77:11:10:e5:46:8c:2f:56:33:86:25:01:
c7:31:14:64:ac:f7:bd:ca:8b:03:fd:a8:09:e9:b3:
f3:78:d6:37:ec:de:4c:1b:27:8e:6f:d2:7d:67:f9:
f1:7f:d3:13:37:cc:85:e9:b6:da:43:63:1d:cc:67:
f0:ef:4e:b7:1c:01:74:82:e6:13:81:cf:8d:c9:1e:
d6:d1:a9:2d:f0:05:3f:d4:8e:16:4e:c8:82:a2:60:
4c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:76:12:EA:1A:62:89:9A:2E:84:B3:37:61:09:4E:88:49:FB:0E:DE
X509v3 Authority Key Identifier:
keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/yHYS6hpiiZouhLM3YQlOiEn7Dt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.228.0/22
185.181.116.0/22
IPv6:
2a0a:cb80::/32
Signature Algorithm: sha256WithRSAEncryption
86:29:fd:f9:65:59:8e:c0:fc:dc:4d:1d:59:ef:f0:e7:d4:54:
e3:a1:ac:ef:70:e5:a2:ec:03:b9:51:e4:c3:67:57:b7:3c:81:
40:7c:2c:38:0a:6f:bd:90:b8:e0:06:49:71:80:93:1e:09:f7:
20:e8:72:aa:14:53:30:98:50:f4:0d:bf:68:b0:63:37:5a:12:
71:75:b5:82:31:49:e5:94:ef:88:d1:1a:0c:56:ba:b4:4e:ba:
16:82:6d:59:a4:95:d6:a1:e2:85:a2:02:19:95:a2:4d:48:31:
7d:a7:a9:ab:be:a9:1b:66:b5:47:4c:ee:35:1d:11:82:74:29:
7b:c8:d0:26:11:41:17:73:71:62:0f:71:9b:df:c8:2a:81:85:
4a:38:e4:4f:05:96:00:3c:0e:c9:3f:09:b6:dd:ee:4d:ea:46:
04:18:8d:60:3b:c0:6d:0f:ba:4c:bf:33:5d:ca:80:07:65:88:
3c:b6:64:3b:82:e9:46:14:37:3b:11:cd:0f:33:24:0e:b0:8f:
86:00:47:e0:03:33:c8:09:c0:3c:49:01:f5:fa:fa:b1:17:8f:
b2:3c:af:c1:30:0c:82:ff:9d:20:88:21:e9:a4:ad:08:bb:a4:
55:bf:e5:9a:e5:82:02:f8:5c:57:58:55:fe:9f:7f:63:65:38:
9f:a7:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:53 2025 by rpki-client on console.sobornost.net